Using short-lived certificates to protect TLS secrets
engineering.fb.com